Skip to content

[filebeat] exclude_lines dont work with docker or kubernetes doc examples (input type container) #40049

Open

Description

From documentation at https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover-hints.html#_co_elastic_logsexclude_lines

Capture d’écran, le 2024-06-27 à 21 56 41

This say we can use exclude_lines input option with Docker or Kubernetes, but this dont work.

When reading code source, I see excludeLines only for type: filestream not for Docker or Log: https://github.com/elastic/beats/blob/main/filebeat/input/filestream/input.go#L402.

I see container input is using log input under the wood (https://github.com/elastic/beats/blob/main/filebeat/input/container/input.go#L74), that is deprecated, do you plan to use filestream instead?


edit:

Related to #34393

I see there is from 1 year a discussion around "replace type: container  by type: filestream", some official documentation is with filestream, and some with container :-/

type: filestream --> https://github.com/elastic/beats/blob/main/deploy/kubernetes/filebeat-kubernetes.yaml
type: container --> https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html

So the big question, how configure filebeat with kubernetes ^^ ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions